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Abstract. We study the first-order primal infon logic. It is the 
core of the policy language DKAL. We provide Gentzen-style cal¬ 
culi for two versions of this logic that are not equivalent. For both 
versions we investigate the semantics: one of them is a general¬ 
ization of the so-called quasi-boolean semantics, the other one is 
a Krypke-style semantics. We prove the completeness results and 
the disjunction property for both logics. 

1 Introduction 

In this paper we consider the first-order primal infon logic. Primal infon logic 
was introduced by Y. Gurevich and I. Neeman in [2| in connection with the 
policy language DKAL (Distributed Knowledge Authorization Language) [1-3, 

9 ]. 

In the primal infon logic every statement is considered as a piece of infor¬ 
mation (infon) that is used in communication between agents. A conjunction of 
infons ip Aijj is considered as the least information containing both ip and ^/>, an 
implication tp —>■?/> is understood as the least information from which an agent 
can obtain tjj as soon as it knows ip. 

For every principal p there is an infon p said ip. The intuitive meaning of 
p said ip is that ip can be derived from the information sent by p. In the infon 
logic, p said ip is considered as a modality satisfying the axioms of the modal 
logic K. These modalities are sometimes called quotation modalities. 

So far, the propositional primal infon logic was mostly studied. In [3] the 
infon logic was introduced as the {A, —^-j-fragment of the intuitionistic logic 
extended by quotation modalities. For the reasons of efficiency the infon logic 
was restricted to the so-called primal logic, a version of the intuitionistic logic 
with a weak form of implication. Y. Gurevich and 1. Neeman in [7] proved 
that the derivability problem for the propositional primal logic is linear-time 
decidable, and this result was extended by Y. Gurevich and G. Cotrini in [8] 
to the primal logic with a weak form of disjunction and unrestricted quotation 
modalities. 

In [3] a Kripke-style semantics for the primal infon logic was introduced. 
L. Beklemishev and Y. Gurevich added disjunction to the language and 
introduced a simpler semantics for the primal infon logic - the so-called quasi- 
boolean semantics, which is a modification of the boolean semantics for the 
classical logic. 

The logic implemented in DKAL is in fact a weak form of the first-order 
primal logic. 

In this paper we investigate two versions of the first-order primal logic. We 
would like to thank the referee of the previous version of this paper for find¬ 
ing a mistake in it. Understanding the cause of the mistake led to discovering 


that the two versions of the first-order primal logic differ from each other to 
a greater extent than we thought. As it turns out, the two types of seman¬ 
tics corresponding for the propositional primal logic behave differently in the 
first order case. A natural generalization of the intuitionistic Kripke-style se¬ 
mantics for the propositional primal logic corresponds to the extension of a 
single-conclusion Gentzen-style calculus by the standard quantifier rules. On 
the other hand, a natural generalization of the quasi-boolean semantics leads to 
a stronger logic. This logic can be alternatively axiomatized either by a similar 
extension of the multi-conclusion Gentzen-style calculus, or by adjoining to the 
single-conclusion calculus the well-known constant domain principle. 

'ix{A\/B{x))^Ay^xB{x). (1) 

For both versions of predicate primal logic we prove soundness and com¬ 
pleteness theorems by adapting the methods from m- 

The intuinionistic logic extended by (1) is sound and complete w.r.t. intu¬ 
itionistic models with constant domains {Grzegorezyk’s models) l|15|b Unlike 
for the primal version, there is no known axiomatization by a simple cut-free 
Gentzen-style calculus for the intuitionistic logic of constant domains (imiiii 
E]). The more complex axiomatizations of this logic can be found in |131 [14]. 

2 First-Order Primal Logic 

Basic symbols of our language are: predicate symbols, constants, logical con¬ 
nectives T, A, V, V and 3 and disjoints sets of free and bound variables 
(a, b,c,... and x, y, z,..., respectively). Formulas of the language are defined 
in the standard way. 

Notice that we consider the language without function symbols. 

2.1 Natural Deduction Calculus 

In this section we consider natural deduction calculus in sequential format from 

m- 

We define the relation F h </?, formula ip is derivable from the set of hypothe¬ 
ses F, as the minimal relation containing the following axioms and closed with 
respect to the following inference rules: 

Axioms: 


FT 1“ 


Rules: 


T \- ip Ap; 

T h if Alp 

Thip 

rhV' 

Vh ip 

r h V' 

T \- ipM Ip 

T ipy p; 

T \- ip T \- ip ^ Ip 


' ' Thip 

(VI) 

r h \/x(p{x) 

where a ^ FreeVar(T), 

r h (p[u/x] 

^ ^ r h Bxifiix) 


M is a constant or a variable, 
(Weakening) J" 

r,(/? I- f/' 


(AI) - 
(VE) 
(^IW) 
(VE) . 


r h T \- Ip 

T \- if A^p 

r,9h(p r,V’b(/9 rh6»vV’ 
r h (p 

Ehy; 

T ip ^ ^p 

r h yx(p{x) 
r h ip[u/x] 


u is a constant or a variable 

rh3xif{x) A, if (a) hi; 
-f:AR^- 


a ^ FreeVar{r, A) 

^ r|-(p T, ip hip 

-iT*- 


This system is denoted QP; its propositional fragment is denoted P. 

Notice that the deduction theorem fails for primal logic; for example, the 
formula \lxip{x) —>■ \/xip{x) is not derivable in the primal logic. 

We also consider primal logic with weak disjunction, which is obtained from 
primal logic by removing the rule (VE). The corresponding systems are denoted 
QPW and PW. 


2.2 Gentzen-Style Calculi 

Sequents are objects of the form P =^> A, where P, A are finite sets of formulas. 
We consider two types of Gentzen-style calculus: multiple-conclusion format 
and version where A consists of exactly one formula. For reasons of brevity 
we formulate the multiple-conclusion variant; to obtain the second one all rules 
must be modified in such a way that the succedent consists of a single formula. 

The axioms and rules of the first-order primal logic are standard except for 
the rule (—s-Rp). 

Axioms: 

ip ^ ip ^ T 



Rules: 


(AL) 

A 

r,(pAlp ^ A 

(AR) 

P ^ A, P => A, '0 
r => A, (/j A V' 

(VL) 

r,(p ^ A r, '0 => A 

T^ipV Ip ^ A 

(VR) 

P ^ A, ip, Ip 

P A,p\/ tp 

(^L) 

p, ')/’=> A r A, 

(—j-Rp) 

T^P;,A 

^,^p ^ Ip ^ A 

P p ^ Ip, A 

(VR) 

T => A,ip{a) 

(VL) 

P, p\alx\ => A 

P => A,'ixip{x) 

P, Va:(/3(a:) ^ A 


where a ^ FreeVarifT, A), 


u is a 




constant or a variable 

(3R) 

P => A, '■p[u/x\ 

(3L) 

P, pipi) => A 

P => A, 3xq}{x) 

P, 3xp{x) ^ A 


with the same constraints. 



(Weakening) 

P A 

(Cut) 

r=^>A,(/j (/?, Pi^A 

r,ri ^ A,Ai 

r,ri ^ A,Ai 


We denote this calculus QGPM; the corresponding propositional calculus is 
denoted GPM. 

To obtain a system with weak disjunction one must remove the rule (VL). 
The corresponding systems with weak disjunction are denoted QGPMW and 
GPMW. 

If we let the succedent consist of exactly one formula and replace the rule 
(^■L) with the following rule: 


(^L) 


P, "0 => 0 P => 

P, ^ 0 ’ 


and the rule (VR) with the following rule: 


(VR) 




ipi V ip 2 


,* = 1 , 2 , 


we obtain the calculus that will be denoted QGP (GP for the propositional 
variant, GPW and QGPW for systems with weak disjunction). 

Unlike for the intuitionistic version of QGPM [T2j, for both QGPM and QGP 
the cut-rule can be eliminated. 


Theorem 1. A sequent P => A *s derivable in QGPM ijf it is derivable in 
QGPM without the use of (Cut). 

There are both syntactical and semantical proofs for Theorem [T] A syn¬ 
tactical proof can be obtained by the standard techniques (for example, from 
m)- The only new reductions concern the weak implication rules and they 
were considered in [5]. A semantical proof will be given in section 2. 

Theorem 2. A sequent P A is derivable in QGP iff it is derivable in QGP 
without the use of (Cut). 
















A syntactical proof of this theorem can be obtained by the standard tech¬ 
niques (for example, from [10]1. 

For the propositional case two formulated Gentzen-style calculi are equiva¬ 
lent. 

Proposition 3. A sequent T ^\J A is derivable in GP iffT ^ A is derivable 
in GPM. 

For the first-order case only one implication holds: 

Proposition 4. If a sequent F => V A is derivable in QGP then F => A is 
derivable in QGPM. 

The converse is not true: we provide a counterexample. Recall that constant 
domain principle is a schema 

(CD) 'ix{A\/B{x))^ A\/\IxB{x). 

Lemma 5. Constant domain principle is derivable in QGPM but is not deriv¬ 
able in QGP. 

Proof. First we provide a derivation of constant domain principle in QGPM. 

A ^ A B{a) 

A A, B{a) B{a) ^ A, B{a) 

A V B{a) => A, B{a) 

'ix{A V B{x)) ^ A, B{a) 

'ix{A V B{x)) => A, \/xB{x) 

\lx{A V B{x)) ^ A V 'ixB{x) 

Suppose that CD is derivable in QGP without (Cut). 

Consider the lowermost rule application in the derivation. It could be (VL) 
or (VR). 

1. The lowermost rule application was (VL): 

A V B(u) => A V yxB{x) 

'ix{A V B{x)) ^ A V 'ixB{x) 

Two cases are possible: 

(a) Before (VL) (VL) was applied: 

A^A\/\/xB{x) B{u) ^ A\/yxB{x) 

A\/ B{u) ^ A\/\/xB{x) 

The right sequent is not derivable, for B{u) implies neither A nor 
VxB{x). So this case is impossible. 

(b) Before (VL) (VR) was applied: 

A V B{u) A A V B{u) ^ 'ixB{x) 

Ay B{u) ^ A\/'\/xB{x) Ay B{u) ^ Ay \/xB{x) 

But A V B{u) implies neither A nor \/xB{x). Contradiction. 












2. The lowermost rule application was (VR): 


(a) 


'ix{A V B{x)) ^ yxB{x) 

'ix{A V B{x)) ^ A V \/xB{x) 

Before (VR) could be (VL) or (VR): 

Ay B{u) ^^xB{x) \/x{A\/B{x)) ^ B{a) 

yx{Ay B{x)) ^\/xB{x) yx{A\/B{x)) ^yxB{x) 

It can be easily shown that neither can be the case. 


's/x{A V B{x)) A 
Vx(A V B(x)) Av VxB(x) 

In this case before (VR) (VL) was applied: 

A V B{u) A 
Vx(A V B(x)) A 

This cannot be the case. 

Contradiction. □ 

Actually, if we add constant domain principle to QGP we obtain exactly QGPM: 

Theorem 6. QGPM h P ^ A iff QGP+(GD) h F ]/A. 

Proof. The implication form right to left is obvious. 

We prove the converse by induction on the derivation of P => A. 

Gonsider the lowermost rule application in the given derivation. The rules 
(AL), (VL), (VL) and (3L) are the same in QGPM and QGP. 

Gonsider the case when the lowermost rule application was (VR) (actually, 
this is the only interesting case): 


P ^ A, (p(a) 

P A,Vx(p(x) ’ 

where a ^ FreeVar(r, A). 

Let (5 = V A. 

By induction hypothesis QGP h P (5 V (p{a). We have to prove that 
QGP h P ^ (5 VVa;(p(a;). 

P (5 V (p(a) 

P => yx{S V (p{x)) yx{S V (p{x)) S V Vx(p(x) (GD) 

P => 5 V 'ixip{x) 

Gonsider the case when the lowermost rule application was (—^-L): 

P, '0 ^ A P A, 1^ 

P, (/?—>• f/: ^ A 


Let (5 = V A. 



By induction hypothesis QGP h F, ■)/) <5 and QGP h F ^ J V We have 

to prove that QGP \- T,(p ^ ip ^ S. 


T,ip ^ Ip 

T,ip ^ S T ^ SV (f T,ip ^ (f ^ Ip F=>(5V(/7 

r, {s v ip) ^ Ip ^ s r, {s v p) ^ Ip ^ p ^ Ip 


T,p ^ Ip ^ 5 


Other cases are similar. □ 

It turns out that QGP is equivalent to the natural deduction calculus QP 
and QGPM is not (since QGPM and QGP are not equivalent). 

Theorem 7. F h is derivable in QP iff T ^ p is derivable in QGP. 

Proof. We prove both implications by induction on the derivation. 

Suggest QGP h F ^ We consider the case when the lowermost applica¬ 
tion of a derivation rule was (3L); other cases are similar or trivial. 

F,V?(a) ^ 'ip 
F, 3xp(x) => Ip 

By induction hypothesis F, p{a) h ^ is derivable in QP. So we can derive 

3xp{x)'r 3xp{x) T,p{a)'rip 
F, 3xp{x) h Ip 

Now suggest F h in QP. Consider the case when the lowermost rule appli¬ 
cation was (3E); other cases are similar or trivial. 

F F 3xp{x) A, p{a) h ip 
F, A h 

By induction hypothesis F => 3xp{x) and A, p{a) => ip are derivable in QGP. 
By applying (3L) and (Cut), we obtain F, A □ 


3 Semantics 

Y.Gurevich, I.Neeman [S] introduced a Kripke-style semantics for the primal 
logic without disjunction. It is based on the notion of cone in a Kripke model and 
in fact is a modification of the standard Kripke semantics for the intuitionistic 
logic. A simpler semantics for the propositional primal logic with or without 
disjunction, the so-called quasi-boolean models, was introduced in [Hj. It can 
be considered as a non-deterministic modification of boolean valuations for the 
classical logic. 

In this section we consider a natural generalization of quasi-boolean models 
to the first-order logic. We show that QGPM is sound and complete with respect 
to this semantics. However, QGP turns out to be sound but incomplete with 
respect to the quasi-boolean semantics. We introduce an extension of Kripke 
models from to the first-order logic and show that QGP is sound and complete 
with respect to it. 









3.1 First-Order Quasi-boolean Semantics 

In this section we provide a natural generalization of quasi-boolean models to 
the first-order logic. For the definitions of quasi-boolean semantics in the propo¬ 
sitional case see [ 6 j. 

A first-order quasi-boolean model is a pair A4 = {M,v), where is a quasi- 
boolean valuation that assigns 0 or 1 to all closed atomic formulas and to all 
formulas of the form tp ^ ip, M ^ 0, for every constant c its interpretation 
c G M is specified. 

The forcing relation M l=„ (we will denote it M N) naturally extends the 
valuation to all formulas: 

1 . Ad N yj O vtpp) = 1 , where is a closed atomic formula or an implication; 

2 . AdNy) and Ad 1 = ' 0 ; 

3. M\= pM if ^ AdNyjorAdN^; 

4. Ad N Vx(p{x) Vm G M Ad 1= p[u/x\] 

5. Ad N 3xip{x) 3m G M Ad 1= ip[u/x]. 

We say that a valuation v is quasi-boolean, if the following conditions hold 
for every implication p ^ if: 

1. If Ad 1= Ip, then M 1= (p ^ ip; 

2. If Ad 1= 0, then either Ad I 7 ' or Ad 1= 0. 

We add a new variable c for every c G Ad to our language. We say that 
r(a) A(a), where a is a vector of free variables, is valid in Ad iff for all 
u £ M 

M'p l\^V[u/a\ implies Ad N A[M/a]. 

(We consider the valuation of the empty-set be 0.) 

QGPM is sound and complete with respect to the first-order quasi-boolean 
semantics. 

Theorem 8. // F =;> A is derivable in QGPM then F A is valid in every 
first-order quasi-boolean model. 

Now we prove the completeness adapting the method from |10| . 

Theorem 9. // F ^ A is not derivable in QGPM without the use of (Gut) 
then there is a first-order quasi-boolean model such that F ^ A is not valid in 
it. 


Proof. See appendix. 


Now we can prove Theorem [TJ 

Corollary. A sequent F ^ A is derivable in QGPM iff it is derivable in QGPM 
without the use of (Cut). 

Proof. Consider F ^ A that is not derivable in QGPM without the use of 
(Cut). By theorem [9l there is a first-order quasi-boolean model Ad such that 
F =^> A is not valid in it. By theorem [ 8 l F ^ A is not derivable in QGPM (if it 
was, it would be valid in Ad). □ 


Remark. It is easy to prove that QGP is sound with respect to the first- 
order quasi-boolean models. However, the completeness does not hold: the 
constant domain principle 

(CD) B{x)) ^ A\/yxElx) 

is valid in every first-order quasi-boolean model, but is not derivable in QGP. 

3.2 Semantics for QGP 

In this section we introduce Kripke models for the single-conclusion variant of 
the first-order primal logic. These are Kripke models for the first-order in- 
tuitionistic logic with a special condition on forcing for implications (and for 
disjunctions, is case of the logic with weak disjunction). 

A Kripke model for the first-order primal logic QGPM is a tuple 
W = (IT, such that 

1. (IT, ^) is a non-empty partially ordered set; 

2. D is a function assigning non-empty sets to the elements of IT such that 
Vu,v € IT(u < u D{u) C D{v)); 

3. is a map assigning 0 and 1 to tuples {u,(p{ci,... ,Cn)), u € IT,Cj G 
D(u), is a closed atomic formula or an implication; Vu, v € W(u ^ v ^ 

= 1 v{{v,ip{ci,...,Cn)) = 1 ). 

The relation W, m 1= is defined as follows: 

1 . W, M 1 = (p iff i'{u, ip) = 1 for closed atomic formulas and implications; 

2. >V,mNT; 

3. W, u \= ip (W, u\= ip and W, u 1= ■(/>); 

4. W, M 1= (p V ■(/> (W, u\= ip or W, u 1= ^); 

5. yV,u 1= Bx(p(x) (3c G D{u) {yV,u 1= (p[c/x\))] 

6 . W, u 1= \lxLp{x) (Vu > u (Vc G D{v) W, v \= ip[c/x])). 

Also W,u\= ip should satisfy the following conditions: 

1. W, M 1= i/' => W, u 1= i/'; 

2 . W, u\=(p^'ip^\/v^u {W, (p or W, v \= ip). 

We add a new variable for every constant c G Uueiv u) and denote it c. 
We say that r(a) => ip{a) is valid in W iff 

Vu G IT Vc G D{u) (W, u 1= /\ r(^ W, u \= ip{P^). 

Remark. To obtain a Kripke model for the first-order primal logic with 
weak disjunction (a WD-model) replace 4. with 

4'. W,u\= ipt ^yV,u\= ipiV ip 2 , i = 1,2. 

QGP is sound and complete with respect to Kripke models. The proof of 
soundness is routine; to prove completeness it is convenient to consider natural 
deduction calculus. 



Theorem 10 (Soundness). If a sequent T ip is derivable in QGP thenT =P p 
is valid in every Kripke model W. 


Theorem 11 (Completeness). If a sequent T \- p is valid in every Kripke 
model, then F h is derivable in QP. 

Proof. The proof is similar to the standard proof of completeness for intu- 
itionistic logic. We prove that ii T [/ p then there is a Kripke model W such 
that yV if T h p. 

Let C be a set of constants. A set of sentences F is C-saturated, iff 

1. T \- if implies if gT-, 

2. F h a V /3 implies a G F or /3 G F; 

3. If F h 3xif{x) then for some c G C if{c) G F. 

Lemma 12. Suppose T \/ p, T,p in a language L. Let C = {co,ci,C 2 ,... } be 
a countable set of constants not in L, and let L{C) be L extended with C. Then 
there is a C-saturated F' sueh that F C F' and V [/ p. 

Proof. Let ifn be the numeration of all formulas in the extended language 
L{C). We construct the sequence of sets of formulas F„: 

1. Fo = F. 

2. For n > 0 several cases are possible: 

(a) if„ f F„ and F„, if^ \f p. Then F„+i = F„ U {if„}. 

(b) ifn GT and ifn has the form 9i V 6 * 2 . For some i G {1,2} F„, 6 *i 1/ p 
(otherwise F„ F p). Fix this i and let F„_|_i = F„ U {Oi}. 

(c) ifn GT and ifn has the form 3x9 (x). Let Ci be the first constant from 
C such that a ^ KreeKar(F„). Let F„_|_i = F„ U {9{ci)}. 

(d) Otherwise F„+i = F„. 


□ 

Now we define canonical model for the primal logic. 

Let Cn, Cl.... be countable disjoint sets of constants: C,- = |c,n, c,i,...}, 
all Cij (f C. We write C” for Co U Ci U • • • U C„. 

Canonical model W is a tuple (IF, D, v), where 

1. W is a set of F' A F such that C(F') = £ U C" for some n and F' is 
C”-saturated; 

2. F' ^ f F' C f; 

3. if £(F') = £ U C” and F' is C”-saturated then £>(F') = C”; 

4. vftf) = 1 ^ G F for closed atomic formulas and implications. 

Lemma 13. For every F' G IF and any sentence if of C{D{T')) 

T'\=if ^ ifGT'. 



Proof. We prove this by induction on ij;. 

If 'i/i is atomic or an implication, the condition holds by definition. 

For ^ = a A /? it is obvious. 

If ^/) = a V /3, then F' t= a V /3 (F' 1= a or F' 1= /3) (a G F' or /I e F') 

((a V /3) G F') since F' is D(F')-saturated. 

For Ip = 3xP{x) the condition holds by saturation properties. 

Let p! = \/xl3{x). Suppose T' \= p but p ^T' (F' is C^-saturated). For any 
c G Cn+i, F' 1/ /3(c). By Lemma fT^ there is a (//'"“'"^-saturated f D F' such that 
f \/ f3{c). Hence F /3(c). Contradiction with F' N Vxp{x). 

li p G F', it is trivial to show that T' \= p. □ 

Lemma 14. The forcing relation T' \= p is quasi-boolean. 

Proof. If F' 1= /3 then /3 G F'. Hence a—>-/3Gr'-tt>r'Na—>-/3by 
definition. 

If F' N a —>■ /3 then Vf ^ F' f 1= a —>■ /3 by monotonicity. If now f t= a, then 
both Of A /3 and a are in F, hence /3 G F and so F N /3. □ 

Now we finish the proof of completeness. For our T \/ ip there is a C”- 
saturated F' such that F C F' and T p. So in our model F' p. 

Note that we can make a rooted model from ours: we have to leave only the 
F'-cone, that is, all F ^ F'. This cone is still a Kripke model. □ 

Remark. To prove that QPW is complete with respect to WD-models 
one has to make a little change in the proof of the previous theorem: remove 
condition 3 from the definition of a C-saturated set and change the definition 
of valuation v in the canonical model: v{p) = I '0 G F' for closed atomic 
formulas, implications and disjunctions. 

3.3 Disjunction Property 

In this section we prove the disjunction property for both QGP and QGPM. 
Recall that the set of Harrop formulas is defined by the following grammar: 

H = T\A\H A H\B -G H\\fxH{x), 

where A is an atomic formula, B is a formula. 

Theorem 15 (Disjunction property). Let L he any of the logics QGP or QGPM. 
If V is a set of Harrop formulas and L h F =P a \/ j3, then L h F ^ a or 

L hr ^/3. 

Proof. For any set of formulas F we define a first-order quasi-boolean model 
M = (M, v) as follows: 

1. M = Constfr) U Const{a) U Const{fi) U {a}, where a is a new constant; 

2. If p is atomic then v{p) = I 'tt- QGPM h F => 

3. v{p p) = 1 ^ {L\- T ^ {p ^ p) and {A4 If p or J\4 t= p)). 

Lemma 16. If M\= p then L h F 

Proof. We prove this by induction on p. The only interesting case is (/? = 
\/xp{x). 

Let At h \/xp{x). Then Vc G M A4 1= p{c), so M 1= p(a). By induction 
hypothesis L h F ^ p{a). Since a is a new constant, L h F => \/xp{x). □ 


Lemma 17. Valuation v is quasi-boolean. 


Proof. If N -0, then L h F => '0. Then L h F ^ tp ^ ip and so the 
right-hand side of condition 3 holds. So by condition 3 A4\=(p^ip. 
li Ai \= ip ^ ijj, then by condition 3 A4 p ot Ai \= ip. □ 

Lemma 18. If p is Harrop, then A4'pp^lj\-T^p. 

Proof. The implication from left to right holds by lemma IThl 
We prove the converse by induction on p. We consider the cases when p is 
an implication or Vxip{x)] other cases are trivial. 

Let p = 0^ip,ipGH,L\-T 9 ^ Ip. We have to show that A4\f 9 or 
Ai\= Ip. Suppose Ai h 9. Then L h V ^ 9, so L h V ^ ip. Since ip is Harrop, 
by the induction hypothesis Ai \= ip. 

Let p = 'ixip{x)^ Ip € H ^ L\- T ^ \/xip{x). For every c £ M L h F ^ '<Pic). 
By the induction hypothesis \/c £ M Ai \= ip{c), so AI 1= Vxip{x). DNow we 
finish the proof of the disjunction property. Recall that both QGP and QGPM 
are sound with respect to hrst-order quasi-boolean models. 

By lemma [T8l if 0 S F then Ai \= 9. Since L F aV/3, by soundness Ai \= aVpi. 
Hence AI N a or AI 1= /3. By lemma [TBl L hF=^>Q!orLhF=>/3. □ 

4 Conclusion 

We considered two first-order variants of the primal logic and introduced se¬ 
mantics for both of them. We proved the cut-elimination and completeness for 
both logics. However, the weaker one, QGP, seems to be more appropriate for 
the primal logic. The stronger one, QGPM, corresponds to an unlikely situation 
when all the agents have the same domain and know about that. 

From the semantical point of view QGP is more like intuitionistic logic when 
QGPM is more like classical logic. However, the disjunction property holds for 
both of them. 
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Appendix 

We give a sketch of a syntactical proof of Theorem [21 

Theorem |2l A sequent T A is derivable in QGP iff it is derivable in QGP 
without the use of (Gut). 

Proof. We follow the standard procedure due to Gentzen. 

Gonsider an application of a cut-rule d. We define its grade g{d) = |0| -|- 1, 
where 9 is the cut-formula in d, and |0| is the height of its parse tree. The rank 
r{d) is the sum of heights of the right and left proof subtrees of the proof-tree 
ending with d. The proof goes by induction on the grade and a subsidiary 
induction on the rank of d. 

Gonsider the cut-rule with maximum grade. If there are several such rules, 
take the one with maximum rank and the leftmost of them. 

It the cut-formula was not introduced on both sides of the proof tree imme¬ 
diately before the cut, it is easy to obtain a proof tree where this cut will have 
lower rank. 

Gonsider the case when the cut-formula was introduced on both sides of the 
proof tree immediately before the cut. We consider the only special case when 
the cut-formula has the form a —/3; other cases are standard. 

r=>/3 ri,/3=^»0 r^a 

r=>a—>'/3 Ti,a —)■ f) => 9 

r,ri 

We reduce it to a proof 

r^/3 Ti,l3^9 

r,ri 

with a cut-rule with lower rank and lower grade. □ 


Now we prove theorem |9l 

Theorem |9l If T ^ A is not derivable in QGPM without the use of (Cut) 
then there is a first-order quasi-boolean model such that T => A is not valid in 
it. 

Proof. For the proof of this theorem we need the notion of the reduction 
tree. A sequent is written in every node of the tree. We say that a free variable 
is available if it appears in some sequent on some step. We define the process 
of building the reduction tree of Tq ^ Aq as follows: 

Step 0. We write Tg => Aq in the root of the tree. 

Step k, k > 0. Two cases are possible: 

(a) In every leaf of the tree antecedent and succedent have a common 
formula. The process is complete. 

(b) Let r A be a sequent written in some leaf of the tree such that 
r n A = 0. 11 cases are possible: 


k = 0 (mod 11) 






Let ifi Aipi,..., (pn /\'ipn be all the conjunctions in L such that reductions 
have not been applied to them on the previous steps. We add a node 
above L A and write there the sequent 

^ ■ >V’n, A 

We say that a (AL) reduction was applied to tpi A ipi,(pn A 'ipn- 
k = 1 (mod 11) 

Let Pi Atpi,... ,pn Atpn be all the conjunctions in A such that reductions 
have not been applied to them on the previous steps. We add 2” nodes 
above L A and write there all the sequents 

r ^ 6i,... ,9n, 

where 9i is either pi or ipi. 

We say that a (AR) reduction was applied to pi Aipi, - ■ ■ ,Pn A'ljin- 
k = 2 (mod 11) 

Let Pi V 'tpi,..., Pn 'tpn be all the disjunctions in L such that reductions 
have not been applied to them on the previous steps. This case of (VL) is 
similar to (AR) reduction. 

fc = 3 (mod 11) 

Let Pi V 'ipi,... ,Pn\/ 'tpn be all the disjunctions in A such that reductions 
have not been applied to them on the previous steps. This case of (VR) 
is similar to (AL) reduction. 

fc = 4 (mod 11) 

Let Pi 'tpi,... ,pn -A ipn be all the implications in T such that reduc¬ 
tions have not been applied to them on the previous steps. We add S{n, 2) 
nodes above T A and write there all the sequents 

V'n. ■ • ■ > V'ifc: r ,..., Pji, A, 
where {{ii... ik}, {ji ■ ■ -ji}} is a partition of the set {1... n)}. 

We say that a (—^-L) reduction was applied to pi —>■ i/)i ipn. 
fc = 5 (mod 11) 

Let Pi ipi,..., pn -A Ipn be all the implications in A such that reduc¬ 
tions have not been applied to them on the previous steps. We add a node 
above T A and write there 

r => V’l. ■ • • , V'n, 

We say that a (—J^R) reduction was applied to pi ipi,... ,pn ^ tpn- 
fc = 6 (mod 11) 

Let 'ixiPi{xi) be all the formulas of the form tJxp{x) in T. 

For every i, let be the first available variable, that was not used in a 
reduction ot'ixiPi{xi) before. If there is no such available variable, take 
first free variable that is not available and mark it as available. 

We add a node above T =► A and write there 


(pi(ai),...,(/?ri(a„),r => A. 



k = 7 (mod 11 ) 

Let '^XiLpi{xi) be all the formulas of the form \/xip{x) in A such that 
reductions have not been applied to them on the previous steps. 

Let oi... a„ be the first not available variables. We add a node above 
r ^ A and write there 

P ... 5 7^n{.O^n)^ A. 

k = 8 (mod 11 ) 

Let Bxiipi{xi) be all the formulas of the form 3xLp{x) in L such that re¬ 
ductions have not been applied to them on the previous steps. 

Let oi... a„ be the first not available variables. We add a node above 
r => A and write there 

(/?i(ai),...,(/?„(a„),r ^ A. 

k = 9 (mod 11) 

Let 3xi(pi{xi) be all the formulas of the form 3x(f{x) in A. 

For every i, let Oi be the first available variable, that was not used in a 
reduction of 3xi(pi{xi) before. If there is no such available variable, take 
first free variable that is not available and mark it as available. 

We add a node above F => A and write there 

F (^^((Zl), . . . , ^n{.O^n) ^ A. 

fc = 10 (mod 11 ) 

If F and A have no common formulas, we add a node above and write 
there F =^> A. 

It can easily be seen that if every branch of the reduction tree is finite, the 
sequent is derivable in QGPM. 

So if a sequent is not derivable, there is an inhnite branch in its reduction 
tree. Take this branch and denote F as the union of all antecedents of the 
sequents written on the nodes of this branch; A - the union of all succedents. 
Now we define the model: let M be the set of all free variables. 

The valuation v is dehned by induction on the complexity of formulas. The 
complexity measures the number of implications: 

1 . c{ip) = 0 , if (/? is atomic; 

2 . c(ip A f/') = c{if W Ip) = max{c(ip), c{ip), }; 

3. c ((/9 Ip) = cpip) + 1; 

4. c{ixip[x/a]) = c{3x{p[x/a]) = c{(p{a)). 

Now we define partial n-valuations Vn assigning 0 and 1 to atomic formulas and 
implications of complexity at most n. For every the forcing relation l=„ (/? is 
dehned as usual for all formulas of complexity at most n. 

For every n, 



1 . Vn{ip) = 1 <^ (/? € f, if (/? is atomic; 

2 . Vn{(p tp) = 1 (((/? ^ € f or l=„_i Ip), if c{(p ip) ^ n. 

Since partial valuations Vn extend each other, as a limit of v„ we obtain the 
valuation v (and the relation N ip) on all closed formulas such that 

1 . v{p) = 1 (/? € r, if (/? is atomic; 

2 . v{p Ip) = 1 ^ (((/? ^ t/i) G f or N Ip). 

This automatically means that if € A, then v{p) = 0 for atomic p and 
implications (because T n A = 0). 

Lemma 19. For every formula p, 

1- then \=v p; 

2. If p g[J A, then \fy p. 

Proof. We prove this by induction on p. 

If p is atomic or an implication, we have (1) and (2) by definition. If (/? is a 
conjunction or a disjunction, the proof is trivial. 

If \/xip{x) € r then for all a G M ip{a) was added to T on some step. So 
Wa € M \= ip{a) by induction hypothesis. 

If \/xip{x) G A than for some a & M ip{a) was added to A on some step. So 
Wa € M ^ ip{a) by induction hypothesis. 

For p = 3x'tp{x) the proof is similar. 

Lemma 20. Valuation v is quasi-boolean. 

Proof. We prove that 1= ip p ^ ip and p ^ ip p or p. 

Let 1= Ip. Then ip ^ A, so p ^ ip ^ A. Two cases are possible: 

1. p ^ Ip G T. Then v(p -G ip) = 1 hy definition. 

2. p ^ Ip ^ T. Then by definition v{p ip) = 1 ]S. 'G ip iS. ip G T. So 
v{p -G Ip) = 1. 

Let p ^ Ip. Again two cases are possible: 

1. p ^ Ip g[_}T. Therefore, (/? G A or f/) G T. If f/) G F, by the definition 
\=y Ip. li P G A, p. 

2. p ^ Ip Since p ^ ip A, v{p -G ip) = v{ip). So l=„ ip. 

□ 

Now we can prove completeness. If Fq ^ Aq is not derivable in QGPM, 
take the model built from its reduction tree. Every formula from Fq is valid 
in it, every formula from Aq is not valid in it. So this is a counter-model for 
To ^ Aq. □ 



